Cloud computing security taxonomy: From an atomistic to a holistic view

Mthunzi, Siyakha N.; Benkhelifa, Elhadj; Bosakowski, Tomasz; Ghedira-Guegan, Chirine; Barhamgi, Mahmoud

doi:10.1016/j.future.2019.11.013

Cited by 32 publications

(19 citation statements)

References 59 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In this regard, several steps are implemented. Restriction mechanisms, access control, permission mechanisms, and authorization are examples of systems that translate users' access requests to govern the usage, entrance, and consumption of an organization's resources or network services [10]. Moreover, the access control policy restricts actions to just authorized individuals and controls all access to the organization's systems.…”

Section: Access Control Policymentioning

confidence: 99%

“…In this paper, security policies refer to tools, regulations, rules, procedures, ideas, management techniques, and best practices. Encryption, error-checking techniques, preventive systems, and detecting instructional tools may all be used to combat many security risks [10]. Such precautions are taken to, firstly, ensure that data are only accessible by authorized users, which is known as "confidentiality"; second, to ensure that data are true and accurate and that malicious software does not deface data, which is known as "integrity"; and third, "availability" refers to ensuring that all network devices are available to the real user [11].…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Cybersecurity Enterprises Policies: A Comparative Study

Mishra

Alzoubi

Gill

et al. 2022

Sensors

View full text Add to dashboard Cite

Cybersecurity is a critical issue that must be prioritized not just by enterprises of all kinds, but also by national security. To safeguard an organization’s cyberenvironments, information, and communication technologies, many enterprises are investing substantially in cybersecurity these days. One part of the cyberdefense mechanism is building an enterprises’ security policies library, for consistent implementation of security controls. Significant and common cybersecurity policies of various enterprises are compared and explored in this study to provide robust and comprehensive cybersecurity knowledge that can be used in various enterprises. Several significant common security policies were identified and discussed in this comprehensive study. This study identified 10 common cybersecurity policy aspects in five enterprises: healthcare, finance, education, aviation, and e-commerce. We aimed to build a strong infrastructure in each business, and investigate the security laws and policies that apply to all businesses in each sector. Furthermore, the findings of this study reveal that the importance of cybersecurity requirements differ across multiple organizations. The choice and applicability of cybersecurity policies are determined by the type of information under control and the security requirements of organizations in relation to these policies.

show abstract

Section: Access Control Policymentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Cybersecurity Enterprises Policies: A Comparative Study

Mishra

Alzoubi

Gill

et al. 2022

Sensors

View full text Add to dashboard Cite

show abstract

“…Since most of the devices in an IoT framework have constrained resources, data are usually stored in the cloud [2]. As a result, the users can continuously upload and download data from anywhere using the internet [3]. Due to this enormous communication of IoT devices through a cloud, they are subject to malicious attacks [4].…”

Section: Introductionmentioning

confidence: 99%

A Low-Complexity Edward-Curve Point Multiplication Architecture

et al. 2021

View full text Add to dashboard Cite

The Binary Edwards Curves (BEC) are becoming more and more important, as compared to other forms of elliptic curves, thanks to their faster operations and resistance against side channel attacks. This work provides a low-complexity architecture for point multiplication computations using BEC over GF(2233). There are three major contributions in this article. The first contribution is the reduction of instruction-level complexity for unified point addition and point doubling laws by eliminating multiple operations in a single instruction format. The second contribution is the optimization of hardware resources by minimizing the number of required storage elements. Finally, the third contribution is to reduce the number of required clock cycles by incorporating a 32-bit finite field digit-parallel multiplier in the datapath. As a result, the achieved throughput over area ratio over GF(2233) on Virtex-4, Virtex-5, Virtex-6 and Virtex-7 Xilinx FPGA (Field Programmable Gate Array) devices are 2.29, 19.49, 21.5 and 20.82, respectively. Furthermore, on the Virtex-7 device, the required computation time for one point multiplication operation is 18 µs, while the power consumption is 266 mW. This reveals that the proposed architecture is best suited for those applications where the optimization of both area and throughput parameters are required at the same time.

show abstract

“…It is causing severe security risks and breaches, allowing attackers and cybercriminals to break into clients' data and services and cause substantial potential losses to cloud infrastructure platforms and systems [12]. Some of the major cloud security breaches include security at the physical level, virtual level, and, more importantly, web-based in tier level virtualized cloud data centers [13,14]. Furthermore, there are security gaps that exist between end-user and vendor assessments of cloud security, privacy, and transparency [15].…”

Section: Introductionmentioning

confidence: 99%

“…Furthermore, there are security gaps that exist between end-user and vendor assessments of cloud security, privacy, and transparency [15]. Similarly, the majority of enterprises with sensitive data such as banks, financial institutions, insurance companies, etc., are also very reluctant to choose cloud computing services and platforms as their primary concern rotate around the integrity, privacy, secrecy, and confidentiality of their data being stored and accessed from the cloud platform [16].…”

Section: Introductionmentioning

confidence: 99%

Next-generation Blockchain-Enabled Virtualized Cloud Security Solutions: Review and Open Challenges

Uddin¹,

Khalique²,

Jumani³

2020

Preprint

View full text Add to dashboard Cite

This paper reviews, discusses, and highlights some of the standard cloud computing vulnerabilities primarily related to virtualization platforms and their implementations while outsourcing services and resources to different end-users and business enterprises. Furthermore, we provide Blockchain-enabled solutions for virtualized cloud computing platform involving both the end-users as well as cloud service providers (CSP) to address and solve different security and privacy-related vulnerabilities using blockchain-enabled solutions to improve their cloud services and resource provisioning facilities.

show abstract

Cloud computing security taxonomy: From an atomistic to a holistic view

Cited by 32 publications

References 59 publications

Cybersecurity Enterprises Policies: A Comparative Study

Cybersecurity Enterprises Policies: A Comparative Study

A Low-Complexity Edward-Curve Point Multiplication Architecture

Next-generation Blockchain-Enabled Virtualized Cloud Security Solutions: Review and Open Challenges

Contact Info

Product

Resources

About